Skip to content
Getting Digital
Microsoft certificationsMicrosoft · exam AZ-104

Microsoft Certified: Azure Administrator Associate

Azure Administrator is the certificate most Azure job adverts actually name. It covers identity, storage, compute, networking and monitoring: the work of keeping an environment running rather than designing a new one.

A hundred minutes, no prerequisite exam, and a validity period that catches people out.

Exam facts

Exam code
AZ-104
Level
Associate
Field
Cloud
Duration
100 minutes
Questions
about 40 to 60, including case studies and drag-and-drop items; hands-on labs possible
Passing score
700 of 1,000 (scaled)
Languages
English, German, French, Spanish, Italian, Portuguese, Japanese, Korean, ChineseThe badges group regional variants: Chinese (Simplified and Traditional) count as one language here, so the vendor lists ten exam editions where this page shows nine.
Price
165 USD (read 8 September 2026)
Validity
1 year, renewable
Exam delivery
Pearson VUE (test centre or online proctored); students through Certiport

Prerequisites: No required certification. Microsoft expects hands-on experience with operating systems, networking, servers and virtualisation, and familiarity with PowerShell, the Azure CLI, the Azure portal, ARM templates or Bicep, and Microsoft Entra ID.

Renewal: Free yearly renewal through an online assessment on Microsoft Learn, available from six months before the certificate expires

Source: exam page at Microsoft · Price: Priced by the country where the exam is proctored: 165 USD in the United States, 126 EUR in Germany and Austria (Microsoft Learn country selector, read 2026-09-08)

How to prepare

  1. 1. The vendor's free learning path

    Microsoft publishes the exam objectives and a learning path free of charge — the authoritative source for scope and weighting. Open the learning path (opens in a new tab)

  2. 2. Online courses

    Courses and practice questions from the directory that target exactly this exam — details, price and the provider link (affiliate) are on the course page.

  3. 3. A practice test in the exam format

    MeasureUp sells a practice test for AZ-104 with questions in the exam format, an explanation for every answer and a timed mode; the price shows in your currency on the shop page. Affiliate link.

    Practice test for AZ-104 at MeasureUp (opens in a new tab)
  4. Book the exam

    Delivered by Pearson VUE (test centre or online proctored); students through Certiport. Schedule with Microsoft (opens in a new tab)

Affiliate disclosure: the course and practice-test links above are affiliate links — buying through them may earn us a commission at no extra cost to you. The vendor's learning path and booking links carry no commission.

The exam is unusually operational for a multiple-choice paper. Questions describe a tenant that already exists and something that has gone wrong or needs changing: a role assignment that grants too much, a storage account whose replication no longer suits the recovery requirement, a virtual network that cannot reach a peer. The right answer is frequently the smallest change that fixes it, which rewards administrators and frustrates people who prepared by reading about features in isolation.

Case-study style items appear, and so occasionally do hands-on labs, which extend the sitting. Microsoft does not publish a fixed question count for role-based exams, so the honest expectation is a range rather than a number, and the scaled score of 700 is not a percentage however much it looks like one.

Twelve months, then an annual chore

  • It expires after a year, which is shorter than almost anything else on this site and shorter than most people assume when they book it.
  • Renewal is free through an unproctored assessment on Microsoft Learn, taken at your desk with no appointment.
  • The window opens six months before expiry and not earlier, so it cannot be dealt with the moment you think of it.
  • Letting it lapse is expensive, because the free route shuts, leaving a full-price proctored sitting as the sole way back.
  • Each certificate you hold repeats this, which is the practical argument for holding two or three rather than collecting them.
AspectAzure Administrator (AZ-104)AWS Solutions Architect Associate (SAA-C03)
Time100 minutes, 120 with labs130 minutes
QuestionsAbout 40 to 6065, of which 15 unscored
Pass mark700 of 1,000720 of 1,000
ValidityTwelve monthsThree years
RenewalFree online assessmentHalf-price resit, or a higher exam
German editionYesNo
Leans towardRunning what existsDesigning what does not yet

The two are the certificates most often weighed against each other by people choosing a first cloud, and the table shows they are not the same kind of exam. This one asks you to operate; that one asks you to design. Over a decade the renewal columns matter more than the sitting fees: twelve free assessments against three or four paid resits, provided you never miss a window. Let your employer's platform decide, and if nobody has picked a platform for you, notice that only one of the two is available in German.

What Microsoft assumes you already do

Nothing gates entry, and the expectations list is long: hands-on experience with operating systems, networking, servers and virtualisation, plus familiarity with PowerShell, the Azure command line, the portal, ARM templates or Bicep, and Microsoft Entra ID. That is a description of a working administrator, and the questions are written for one. The identity items are where on-premise experience turns from asset to trap, because Entra is not a domain controller with a new name and the exam knows exactly which instincts to test. Pearson VUE delivers it in nine editions, German included, at a price that follows the country of sitting.

Put the renewal date in the calendar before you sit the exam

The free assessment opens six months before expiry and closes on the day the certificate lapses. Candidates lose this certificate by forgetting, not by failing: the assessment is brief and open-book. Set two reminders, one when the window opens and one a month before it shuts, and the twelve-month term stops being the disadvantage it looks like.

What a question looks like

Written by us in the exam's style. It is not a real question from any question bank, and we do not publish those.

A storage account holds audit records that must survive the loss of an entire region and must remain readable during such an outage. The team currently uses geo-redundant storage and reports that the data is unavailable while a regional failure is in progress. What should be changed?

The current configuration already replicates across regions, so candidates who match on the words redundancy and region conclude that nothing is wrong. The requirement hiding in the stem is read access during the outage, which is a different replication option with a very similar name. Microsoft builds a great many questions on pairs of options that differ by one capability.

What it costs to get and to keep

ItemAmountNote
Exam fee165 USDpriced by the country where the exam is proctored, so this is the United States figure rather than a worldwide price (read 12 September 2026)
Exam fee, Germany and Austria126 EURfrom the Microsoft Learn country selector (read 8 September 2026)
Annual renewalnot publishedfree, through an unproctored online assessment available only in the six months before expiry (read 12 September 2026)
Renewal after lapsing165 USDthe full proctored exam again; missing the window is the expensive mistake this certificate invites (read 12 September 2026)

How much preparation, from where you are

You administer Azure at work already
Shorter than the syllabus implies. Focus on the corners your organisation does not use, which are usually backup and recovery options, and on governance, which tends to belong to somebody else until an exam asks.
You administer Windows Server or VMware on-premise
The strongest starting point outside Azure itself. Identity is the genuine shift: Entra is not a domain controller in the cloud, and questions repeatedly test that difference.
You passed the fundamentals paper and nothing else
A real jump rather than the next rung. Fundamentals describes; this one troubleshoots. Get a trial subscription and break things in it before booking.

What passing this does not prove

  • Whether you can design an environment from nothing, which is the architect exam's job.
  • Infrastructure as code. The questions live in the portal even when real work does not.
  • Cost management under pressure, only the tools that report it.
  • Anything about running Azure at the scale where its interesting failures start.

Against the alternatives

SAA-C03AWS Certified Solutions Architect – Associate
Roughly the AWS analogue in hiring weight, albeit tilted toward design while this tilts toward operations. It runs three years to this one's twelve months, which is the difference people notice later.
AZ-305Microsoft Certified: Azure Solutions Architect Expert
The architect certificate directly above, and it requires this one. Holding both means two annual renewals rather than one, which is worth knowing before you start the climb.
AZ-900Microsoft Certified: Azure Fundamentals
Optional and not a prerequisite. Skip it if you are technical; the fundamentals paper adds nothing an employer will read once you hold this.

AZ-104 — quick answers

Is there really an annual renewal?

Yes, and it is the most-missed fact about Microsoft's role-based certificates. The renewal itself is free and takes an unproctored assessment on Microsoft Learn, but it only opens in the final six months, and a lapsed certificate can be recovered only by sitting the full exam again.

Do I need AZ-900 first?

No. There is no prerequisite between the tiers and most technical candidates go straight here. The fundamentals paper is aimed at people who describe Azure rather than administer it.

How many questions will I get?

Microsoft does not publish a count for role-based exams, so expect a range. Some sittings include case studies or hands-on labs, and a lab extends the time allowed rather than replacing questions.

Is on-premise experience worth anything here?

A great deal, with one caveat. Storage, networking and virtualisation concepts carry over almost intact. Identity does not: treating Entra as Active Directory with a fresh label is the surest way to shed marks.

What does the architect certificate above this add?

A prerequisite, for one thing: AZ-305 cannot be claimed without holding this certificate current. It also changes the question from what to fix to what to build, across case studies several screens long. Sit this, run a tenant for a year, then decide whether design is the direction.

What comes next

Concepts this exam draws on

Glossary entries with the reason each one matters for AZ-104.

  • Cloud Hosting

    Deploying and managing Azure compute is the administrator's core domain.

  • IaaS

    Virtual machines, disks and virtual networks are most of AZ-104.

  • Load Balancing

    Azure Load Balancer and Application Gateway configuration questions.

  • DNS

    Azure DNS zones and name resolution inside virtual networks.

  • Subnetting

    Virtual networks are carved into subnets, and the exam asks which address range fits where.

  • Routing

    User-defined route tables and the default system routes decide where a virtual machine's traffic goes.

  • Firewall

    Network security groups are the platform's stateful filter, and the exam has you write and order their rules.

  • IAM

    Role assignments at subscription, resource group and resource scope are a whole skill area.

  • VPN

    Site-to-site and point-to-site gateways are how the exam connects an office to a virtual network.

A vendor certificate — not a degree and not an accredited qualification. Facts are from the vendor's exam page on the date shown; prices are list prices that vary by country and tax.

Last reviewed 12 September 2026 · Getting Digital